New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create section talking about domain separation #33

Open

SalusaSecondus opened this issue Oct 12, 2022 · 0 comments

Owner

SalusaSecondus commented Oct 12, 2022

People keep messing up domain separation, so we need to talk about it. Things to include are:

Using explicitly different keys for different domains
Deriving different keys for different domains
AAD
Having some universally parsable portion of the ciphertext which indicates the domain (this is a bad solution, but works)

Separate from keyed functions:

Different algorithms
Different prefixes
Different salts
etc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment